ACI L3Out Contract Roles for External Initiation
An engineer must configure a group of servers with a contract that uses TCP port 80. The EPG that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?
Community Votes
60% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests your understanding of provider vs. consumer roles in ACI contracts based on who initiates the traffic flow.
This question addresses Cisco ACI contract roles in an external Layer 3 cloud scenario. It establishes that when the EPG needs to initiate communication with the outside, it must act as the consumer.
Most users select Option A because they assume web servers 'provide' a service, failing to distinguish between offering a service and needing access to external resources.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
In Cisco ACI, the 'Consumer' role is assigned to the entity that requests or initiates communication, while the 'Provider' offers the service. Since the requirement states the EPG requires the external cloud to 'initiate communication' (meaning the EPG is the one reaching out), the EPG must be configured as the Consumer.Why the Other Options Are Wrong
Option A incorrectly assigns the Provider role to the EPG, which would imply the EPG is serving the L3Out. Option B focuses on routing (OSPF) rather than policy/contract enforcement. Option C suggests a taboo contract, which blocks traffic entirely, contradicting the need for connectivity.Community Comment Notes
Community feedback confirms D is correct. As one user noted, "the web servers need access to the external network for their operations," clarifying that initiating access makes them consumers. Another comment reinforced this by stating the EPG acts as the consumer when it requires the L3Out to facilitate the connection.Exam Strategy
Always identify the initiator of the traffic to determine the Consumer role. If the internal EPG is reaching out to the external world, it is the consumer, regardless of whether it hosts a web server.
Frequently Asked Questions
Why is the web server EPG a consumer if it serves web traffic?
Because the EPG is initiating the outbound connection to the external cloud, making it the consumer of that specific contract.
What happens if I configure the EPG as a provider here?
The EPG would offer services to the L3Out, but since the L3Out isn't requesting those services, the required access won't be granted.